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TENTH PROBLEM 



KIRSTEN EISENTRAGER AND GRAHAM EVEREST 

Abstract. Descent via an isogeny on an elliptic curve is used to 
construct two subrings of the field of rational numbers, which are 
complementary in a strong sense, and for which Hilbert's Tenth 
Problem is undecidable. This method further develops that of 
Poonen, who used elliptic divisibility sequences to obtain undecid- 
ability results for some large subrings of the rational numbers. 



1. Hilbert's Tenth Problem 

In 1970, Matijasevic [10], building upon earlier work of Davis, Put- 
nam and Robinson [5], resolved negatively Hilbert's Tenth Problem for 
the ring Z, of rational integers. This means there is no general algo- 
rithm which will decide if a polynomial equation, in several variables, 
with integer coefficients has an integral solution. Equivalently, one says 
Hilbert's Tenth Problem is undecidable for the integers. See [TH Chap- 
ter 1] for a full overview and background reading. The same problem, 
except now over the rational field Q, has not been resolved. In other 
words, it is not known if there is an algorithm which will decide if a 
polynomial equation with integer coefficients (or rational coefficients, 
it doesn't matter) has a rational solution. 

Recently, Poonen [TT] took a giant leap in this direction by proving 
the same negative result for some large subrings of Q. To make this 
precise, given a prime p of Z, let |.| p denote the usual p-adic absolute 
value. Let 5* denote a set of rational primes. Write 

Z s = Z[l/S] = {xeQ: \x\ p < 1 for all p <£ S}, 

for the ring of ^-integers of Q. 
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Theorem 1.1 (Poonen [H]). There are recursive sets S of primes 
having density 1 with the property that Hilbert's Tenth Problem for Z $ 
is undecidable. 

Given the importance of Theorem ll.il it is surely worth investigat- 
ing more closely the subrings of Q to which it applies. Besides 
the intrinsic interest, the hope remains that a solution for the rational 
field might be accessed through the rings Z5. The aim of this paper is 
to extend Poonen's method in a non-trivial fashion, by using descent 
on elliptic curves. As motivation, note that although the rings Zg in 
Theorem II .11 are formed by inverting sets of primes with density 1, the 
sets of primes are necessarily co-infinite. It is not even clear from [Tl] 
whether a finite collection of such rings will generate Q. In this paper 
we provide examples where two rings suffice, and which are comple- 
mentary in a strong sense. Write P for the set of all prime numbers. 

Definition 1.2. Two subsets of P are said to be complementary if their 
union is P. They are said to be exactly complementary if, in addition, 
they have empty intersection. A subset of Z is said to be recursive if 
there is an algorithm to decide if any given integer lies in that subset. 

Theorem 1.3. There are exactly complementary recursive sets S,T C 
P such that Hilbert's Tenth Problem is undecidable for both rings Z5 
and "Lt- 

Given sets 5* and T as in Theorem \1.'6\ any element q G Q* can be 
written 

q = st with s e Z* s ,t e Z* T , (1) 
in a way that is unique up to sign. Equation ([I]) is a kind of diophantine 
definition (see [TU Chapter 1]) of the product group 

over the group Q*. Hitherto, the concept of diophantine definition has 
only been studied for rings and it is not known whether the property 
in ([jQ) will permit some kind of 'lifting' of undecidability to the rational 
field. 

Theorem 11.11 was proved by constructing a diophantine model of the 
positive integers in the ring Z5 using integer sequences (elliptic divisi- 
bility sequences) constructed from elliptic curves. Consult [11] and [HJ 
Chapter 12] for the background and full details of the definitions. 

Definition 1.4. We say a set A C Z5 is diophantine over Zg to mean A 
is a projection of the set of solutions of a diophantine equation over Z5. 
In other words, there exists f E Zs[y,xi, . . . , x n ] such that 

a G A 3t G Zg with /(a, t h . . . , t n ) = 0. 
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A diophantine model of N over Zs is a bijection N < — > A, where A is 
diophantine over Z^ with the additional property that the graphs of + 
and x correspond to diophantine subsets of A 3 . 

As in [TlT [14"] the undecidability of Z is essentially equivalent to that 
of N, together with + and x. Technically it is easier to model this 
latter set. Definition 11.41 is important because it allows undecidability 
results to be lifted from the positive integers to the set A. Exactly 
the same issue arises in this paper. On this point the arguments are 
identical. 

1.1. Background Results. Definition II .41 brings to the fore the role 
played by diophantine equations. What follows is a brief overview of 
earlier results, which shows how advances have been made by chang- 
ing the underlying equation. In [9J, Kim and Roush resolved Hilbert's 
Tenth Problem negatively for rings Z$ when S consists of a single 
prime. The underlying equation involved a quadratic form, much in 
the spirit of earlier work by Julia Robinson. A negative answer to 
Hilbert's Tenth Problem for rings Zg, when S is finite, follows using 
the concept of diophantine class as in [HJ Chapter 4] . Shlapentokh [13] 
resolved Hilbert's Tenth Problem problem for some large subrings of 
number fields, where the underlying diophantine equation arose from 
a homogeneous polynomial known as a norm form. Poonen's The- 
orem [TT], Theorem 11.11 is important because, for the first time, it 
resolved Hilbert's Tenth Problem for certain rings Z5 when S is infi- 
nite. His underlying equation was an elliptic curve and the definition 
of diophantine model was satisfied by using an elliptic divisibility se- 
quence. Theorem II .11 has been generalized to subrings of number fields 
in [12] . In another interesting direction, Cornelissen and Zahidi [3] also 
used an elliptic divisibility sequence to obtain decidability results. 

2. Elliptic Curves 
Let E denote an elliptic curve, 

E : y 2 + aixy + a^y = x 3 + a2X 2 + a^x + a§ (2) 

where ai, . . . , a§ denote integers. Consult [21 [15] for the basic properties 
of elliptic curves. Suppose Q G E(Q) denotes a non-torsion rational 
point. The shape of the defining equation ([2]) forces the denominator 
of the x-coordinate of a rational point to be a square, and that of the 
y-coordinate to be a cube. For 1 < n G N, write nQ for the n-th 
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multiple of Q according to the usual addition law on E. Then 

\ n n / 

with A n ,B n , and C n denoting integers which satisfy B n > and 
gcd(B n ,A n C n ) = 1. The sequence B = (B n ) is known as an ellip- 
tic divisibility sequence. An important property of B (the 'divisibility' 
part of its name) is the following 

n\m in N implies B n \B m in N. (4) 

Definition 2.1. Let B = (B n ) denote a sequence with integer terms. 
We say an integer d > 1 is a primitive divisor of the term B n ^ if 

(a) d | B n and 

(b) gcd(d, B m ) = 1 for all non-zero terms B m with < m < n. 

In 1986, Silverman [T6] proved an analogue of Bang's theorem pQ, 
that the terms of elliptic divisibility sequences have primitive divisors 
for all sufficiently large indices. 

Remark 2.2. If Z denotes any prime divisor of d as in Definition 12.11 
then it is referred to a primitive prime divisor of B n . Provided / is a 
prime of non-singular (hereafter good) reduction for E, an important 
group theoretic interpretation of the situation is that n is the order of 
the point Q mod / on the reduced curve. It follows that 

B rn = mod I if and only if n\m. (5) 

2.1. Two Primitive Divisors. Silverman's Theorem ensures that for 
all sufficiently large n, every term B n has a primitive divisor. More can 
be said when descent via an isogeny is possible. 

Proposition 2.3. Suppose Q G E(Q) is a non-torsion point which 
generates an elliptic divisibility sequence B = (B n ). Let a : E' —>■ E 
denote an isogeny of prime degree q and assume Q = o~{Q') for some 
rational point Q' G E'(Q). Then all terms B n , with n sufficiently large 
and coprime to q, have at leas^ 2 distinct primitive prime divisors. 

The techniques needed for the proof of Proposition 12.31 draw upon 
those used in [B], [7] and [S]. Write a* : E — > E' for the dual isogeny, 
also of prime degree q. The compositions aa* and a*cr are the maps [q] 
(times q) on E and E' respectively. Given a : E' —>■ E and Q = cr(Q'), 
write b = (b n ) for the elliptic divisibility sequence corresponding to Q'. 



'At least' means no fewer than. 
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Definition 2.4. Given any elliptic divisibility sequence B = (B n ), 
write B* n for the primitive part of B n . This is the maximal divisor 
of B n which is coprime to all the terms B m with < m < n. 

Lemma 2.5. There are positive constants h and h! with h = qh' such 
that for large n: 

• \ogB n ~ hn 2 

• logb n ~ h'n 2 

• log B* > .547 hn 2 

Proof of Lemma 12.51 The first two formulae represent a strong form 
of Siegel's Theorem [I5j Chapter IX]. See also [7j for a direct proof us- 
ing elliptic transcendence theory. For the third formula, use [HI Lemma 
3.3]. From this follows a lower bound of the form 

log^^log^-^log^ 2 ^). 

p\n 

Now apply the first formula together with the upper bound 

x 1 

V — < .453 

P 

The constants h = h(Q) and h' = h(Q') represent the canonical height 
of Q and Q' on their respective curves. The relation h = qh' is a 
property of the canonical height under isogeny. □ 

Proof of Proposition 12.31 Let p denote any prime of non-singular 
reduction for E (or E', the two curves share the same set of good 
reduction primes). By applying an isomorphism to E' if necessary, 
Velu's formulae [TT] imply 

ord p (6 n ) < ord p (£>„) < ord p (b qn ) for all n > 0. (6) 

For all sufficiently large n, the term b n has a primitive prime divisor l n . 
Assume that n is large enough to guarantee that l n is a prime of good 
reduction. Then /„ is a divisor of B n by If gcd(g,n) = 1, we 
claim /„ is actually a primitive prime divisor of B n . If not, then l n \B m , 
for some < m < n, chosen minimally. In group-theoretic terms, see 
Remark \2.2\ this means 

mQ = nQ' = O mod l n 

on the corresponding reduced curves. Now §5$) implies the following 
divisibility relations 

m\n and n\qm. 
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Since q is prime these force n = qm, contradicting the assumption that 
gcd(g,n) = 1. 

The proof is now completed using the data about growth rates of 
the various sequences in Lemma 12.51 Note [6l [7] that the contribution 
to B n from primes of singular (hereafter bad) reduction is negligible. 
In particular, it follows that S* grows asymptotically faster than its 
divisor b* n . It remains to show that for all large enough n, B* has 
a prime divisor which is coprime to b* n . This forces B* to have at 
least two distinct prime divisors, which is the desired conclusion. To 
prove this last claim use the following property of elliptic divisibility 
sequences from the p-adic theory of elliptic curves. The property can 
be sourced in [T5], Chapter IV] and is stated in [H Lemma 3.1]. It says 
that provided l n > 2 and l n \b n , 

ordi n (b qn ) = ordi n (b n ) + ord in (g). (7) 

If l n \ gcd(B* n , B;jb* n ) then © implies that 

ordi n (b qn ) > ordi„(6„). 

Now (j7]) shows that the only way this can happen is if l n \q. We may 
assume n is large enough to avoid this possibility. □ 

3. Proof of Theorem 11.31 

Proof of Theorem 11.31 Assume E is an elliptic curve and there is 
an isogeny a : E' — > E of prime degree q such that: 

• E(Q) =< Q >~ Z, 

• E(M.) has only one real-connected component, 

• Q is the image of a Q-rational point under a, 

• B q > 1. 

Example 3.1. y 2 = x 3 — 4 Q — [2,2] This curve has conductor 432 
and it appears as 61 in Cremona's tables |4]. There is a 3-isogen}0 
from the curve (called 62) y 2 = x 3 + 108 which maps [6, 18] to Q. The 
properties claimed are easily checked. 

By Proposition 12.31 for all sufficiently large primes I, Bi has at least 
two distinct primitive prime divisors. (Any prime divisor of a term Bi, 
with I a prime, is necessarily a primitive prime divisor, using the 
essential contribution of Proposition 12.31 is that it guarantees at least 
two distinct prime divisors). Also, by Proposition 12.31 each term Bw, 
where I, /' are distinct primes, has at least two distinct primitive prime 



2 An example meeting the needs of the proof will necessarily have degree greater 
than 2. This is because a curve with a 2-isogeny will have a rational 2-torsion point. 
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divisors, except possibly for a finite number of pairs (I, I'), provided the 
primes I and I 1 are distinct from q. 

Definition 3.2. For every prime I, let a\ > 1 denote the smallest 
integer such that B^ > 1. Let L denote the set of primes I such 
that a/ > 1. Then L is finite by Siegel's Theorem. In Example I3.1[ 
2 G L because B 2 = 1. Also [151 Proposition 2.5], the set of everywhere 
good reduction points form a subgroup of E(Q). It follows that for each 
bad reduction prime p, this subgroup contains the kernel of reduction 
mod p. Thus b p > 1 exists such that p\B n if and only if b p \n. Write b 
for the computable number consisting of the largest of the b p . 

Exactly as in use Vinogradov's Theorem [181 Chapter XI] on 
the additive circle 

E(R) ~M/Z~ [0,1). 

This theorem guarantees that the multiples IQ, with I prime, are 
dense in the real curve E(M). With b as in Definition 13.21 choose a 
set U of primes inductively as follows: given h, . . . , k-i choose k to be 
the smallest prime outside L U {q} with U > lj > b for all j < i and 

\yi -i\ < l/10z, where kQ = (x u yi). (8) 

3.1. Definition of S. For all sufficiently large n define p n to be the 
largest primitive prime divisor of B n , which is also a good reduction 
prime: this exists by [16]. Let the set Si consist of the prime divisors 
of all the terms Bi^i G N. The elements of S\ are all good reduction 
primes because U> b for all i EN. Now define the set 5 2 by 

S 2 = {pr-l prime ^ liii}U{p hl] : 1 < j < i}ll{pi k :IeL,iEN}. (9) 

Clearly Si H S2 — 0. Let S denote any set containing Si but disjoint 
from 5*2. The primes in S2 act as witnesses to elements being outside 
of E(Zs). In other words, as in [Til [H] , 

U< {±hQ} = E(Z S ), (10) 

with at most finitely many exceptions. For convenience, a proof of ffTOl 
is now indicated. Clearly all ±kQ E E{7Ls) because the primes dividing 
terms B\ i lie in Si C S. On the other hand, for all large enough n, 

l\n for some / 7^ U or lilj\n or Ui\n, I E L 
3p\B n with p = pi or p = p hl . or p = p u ., I E L 
3p\B n with P GS 2 C5' 
nQ i E(Z S ). 



n 7^ ±/j some i 
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Write A for the set A — {yi : liQ = The bijection required 

by Definition 11.41 is i <-> Plainly A is diophantine over Z5, using the 
underlying diophantine equation of the elliptic curve. 

Lemma 3.3. The graphs of+ and x correspond to diophantine subsets 
of A 3 . 

Lemma 13.31 is proved in [Til Section 10]. For example, it follows 
from (|SD that m + n — q differs from y m + y n — y q by at most 3/10. 
Therefore adding on N corresponds to adding on A then rounding to 
the nearest element. In other words, m + n = q corresponds to a 
diophantine predicate on A. Multiplication is similar because it can be 
obtained by squaring and adding. It follows mutatis mutandis that N 
has a diophantine model in Z5 and therefore Hilbert's Tenth Problem 
is undecidable in Zg. 

3.2. Definition of T. Define p' n , for all sufficiently large n with q \ n, 
to be the second largest good reduction primitive prime divisor of B n . 
This exists by Proposition 12.31 Now define T\ = S\ and 

T 2 = {p[:l i ^l prime} U {p' kl . :l<j<i}U {p' Ui : I G L, % G N}. (11) 

The hypothesis that B q > 1 implies q £ L. This is used to guarantee 
that p' u . exists for all large i. Let T denote any set containing 7\ but 
disjoint from T%. In exactly the same way as before, 

Ui{±liQ} = E(Zr), 

with at most finitely many exceptions. Again N has a diophantine 
model in and therefore Hilbert's Tenth Problem is undecidable 
in Zy. Note that S2 fl T 2 = so choose 

S = P- S 2 and T = P-T 2 . 

This results in S U T = P. Subsequently, it will be argued that the 
sets Si,Ti,i = 1,2 are recursive. It follows that both S and T can be 
chosen to be recursive. This completes the proof that complementary 
sets can be found. This argument will now be refined. 

3.3. Exactly Complementary Sets. To show that S and T may be 
chosen in an exactly complementary fashion, choose the sets Si and £2 
exactly as before. Now choose a set U' of primes inductively as follows: 
given l[, . . . , choose l[ to be the smallest prime outside U U L U {q} 
with l\ > lj > b for all j < i and 

\y[ -i\< l/10i, where l[Q = (4 y[). (12) 

The set U' exists by Vinogradov's Theorem again. Define the set Ti to 
consist of all prime divisors of the terms By , i G N. The set Ti contains 
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only good reduction primes, also T± D Si = and T\ fl S 2 ^ 0. Now 
choose T 2 as follows: 

T 2 = { P ; : Z^ / prime} U {p^. :l<j<i}U { P m : Z G L, i G N}. (13) 

Then T 2 is disjoint from T x U 5*2 but it has non-empty intersection with 
Si. Now let S denote any recursive set containing Si U T 2 but disjoint 
from S 2 U Ti, for example, S — S\ U T 2 . Then S will contain Si and 
be disjoint from S 2 . Let T be the complement of S. The set T will 
necessarily contain S 2 U Ti and be disjoint from Si U T 2 . It follows 
that T will contain Ti and be disjoint from T 2 . A Venn diagram helps 
to explain the relationship between these sets. 




The undecidability results follow exactly as before and this completes 
the proof of Theorem 11.31 

3.4. Recursive sets. The sets of primes Si,S 2 ,Ti,T 2 contain only 
good reduction primes. The sets U and U' are recursive because the 
members form a strictly increasing sequence, the terms of which can be 
computed in order. In what follows, let p > denote a prime of good 
reduction, and let n p denote the order of Q mod p. Now p\B^ for some i 
if and only if n p G U, which can be checked because U is recursive. It 
follows that Si is recursive. To see if S 2 is recursive, first show how to 
check if p = pi for some I ^ U. Factorizing E p = \E(¥ p ) | , one can decide 
if there is a prime factor l\E p such that I ^ U because U is recursive, 
then check if p = p\. To see if p = p^i- for some 1 < j < i, factorize n p 
to see if it is the product of two elements U, lj G U and p = pi^. The 
latter condition can be checked by factorizing earlier terms: in fact, 
only an d Bi j need to be checked. Checking to see if p = pn i for 
some I G L is similar. The set L is recursive because membership can be 
determined as follows: Z G L if and only if B\ = 1. This completes the 
proof that S 2 is recursive. The proofs for T x and T 2 are almost identical, 
except that one checks for the second largest prime factor. □ 
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